Patentable/Patents/US-9704134
US-9704134

System and method of consolidated central user administrative provisioning

PublishedJuly 11, 2017
Assigneenot available in USPTO data we have
Inventorsnot available in USPTO data we have
Technical Abstract

In one embodiment the present invention includes a computer-implemented method of reducing a quantity of business application programming interface (BAPI) calls in a hardware client-server environment. The method includes configuring a centralized provisioning system on a hardware server with access definitions for systems. The method further includes receiving, by the centralized provisioning system, a provisioning request for a user of a client to access the systems. The method further includes determining a collected BAPI call according to the access definitions. The method further includes providing access to the user according to the collected BAPI call.

Patent Claims
24 claims

Legal claims defining the scope of protection. Each claim is shown in both the original legal language and a plain English translation.

Claim 1

Original Legal Text

1. A computer-implemented method of reducing a quantity of business application programming interface calls in a hardware client-server environment, wherein the client and the server each contain a processor and a memory, the method comprising: configuring a centralized provisioning system on a hardware server with a plurality of access definitions for a plurality of systems, wherein the plurality of systems includes a parent system and a plurality of child systems; receiving, by the centralized provisioning system, a provisioning request for a user of a client system to access at least two of the plurality of child systems; determining a collected business application programming interface call from the client system, according to the plurality of access definitions; and determining, by the centralized provisioning system, whether a system of the at least two of the plurality of child systems in the provisioning request participates in central user administration, if the system participates in central user administration, the collected business application programming interface call collects at least two business application programming interface calls to the at least two of the plurality of child systems into a single business application programming interface call to the parent system, and the centralized provisioning system provides access to the user to the at least two of the plurality of child systems according to the collected business application programming interface call to the parent system, and if the system does not participate in central user administration, the centralized provisioning system performs non-central user administration provisioning for the system by making a business application programming interface real time agent call that provides access to the user.

Plain English Translation

A method implemented on a computer system reduces the number of BAPI (Business Application Programming Interface) calls in a client-server environment. A centralized provisioning system is set up on a server with access definitions for multiple systems (parent and child). When a user requests access to two or more child systems from a client, the centralized system determines a "collected" BAPI call based on the access definitions. If a requested child system uses central user administration, the system combines the separate BAPI calls for those child systems into a single BAPI call to the parent system. The user then gets access based on this collected call to the parent. If a system doesn't use central administration, the system makes a real-time BAPI agent call, providing the user with access through this direct call.

Claim 2

Original Legal Text

2. The method of claim 1 , wherein determining the collected business application programming interface call comprises: generating a map of the plurality of systems that includes the parent system and the plurality of child systems; and determining the collected business application programming interface call according to the map.

Plain English Translation

To determine the collected BAPI call described in the method for reducing BAPI calls (CLAIM 1), the system first creates a map that shows the relationships between the parent and child systems. The collected BAPI call is then determined based on this map. This map helps the system understand which child systems are related and allows for efficient consolidation of BAPI calls via the parent system when possible.

Claim 3

Original Legal Text

3. The method of claim 1 , wherein determining the collected business application programming interface call comprises: determining whether a system level configuration is defined; determining whether a global level configuration is defined; and determining the collected business application programming interface call according to the system level configuration and the global level configuration.

Plain English Translation

To determine the collected BAPI call described in the method for reducing BAPI calls (CLAIM 1), the system checks if a system-level configuration exists and if a global-level configuration exists. The collected BAPI call is determined based on these configurations. This allows flexibility, where some access definitions can be specific to individual systems, while others apply across all systems, using a hierarchy to resolve which access policy to enforce.

Claim 4

Original Legal Text

4. The method of claim 1 , further comprising: configuring the centralized provisioning system with a plurality of access settings for the plurality of systems; determining a plurality of provisioning parameters for the plurality of systems according to the plurality of access settings; and providing access to the user according to the plurality of provisioning parameters.

Plain English Translation

In the method for reducing BAPI calls (CLAIM 1), the centralized provisioning system is configured with access settings for the multiple systems. Based on these access settings, the system determines provisioning parameters for those systems. The user is then granted access based on these determined provisioning parameters. Thus, access settings drive how user access is configured.

Claim 5

Original Legal Text

5. The method of claim 4 , wherein the plurality of access settings includes a global level setting and a plurality of system level settings.

Plain English Translation

The access settings used to determine provisioning parameters (as described in CLAIM 4) include both a global-level setting and system-level settings. This structure allows some access rules to be applied universally, while others are tailored to specific systems within the environment, offering a balance between standardization and customization.

Claim 6

Original Legal Text

6. The method of claim 4 , wherein the plurality of provisioning parameters includes at least one of a direct provisioning parameter and an indirect provisioning parameter.

Plain English Translation

The provisioning parameters that grant access (as described in CLAIM 4) can be either direct or indirect provisioning parameters. This enables granular control over how access is given, allowing the system to directly assign permissions or use indirect methods such as group memberships or role assignments to manage access.

Claim 7

Original Legal Text

7. The method of claim 1 , wherein the provisioning request corresponds to a plurality of business application programming interface calls, and wherein the collected business application programming interface call results in a reduced quantity of business application programming interface calls as compared to the plurality of business application programming interface calls.

Plain English Translation

The user's access request generates multiple BAPI calls; however, the collected BAPI call (described in CLAIM 1) reduces the total number of BAPI calls compared to the original set of calls. This reduction is the core benefit of the centralized provisioning system, improving efficiency and performance in the client-server environment by consolidating requests.

Claim 8

Original Legal Text

8. The method of claim 1 , wherein the provisioning request corresponds to a request to access a plurality of business objects managed by the plurality of systems, and wherein providing access comprises: providing access, to the user, to the plurality of business objects according to the collected business application programming interface call.

Plain English Translation

The user's access request involves accessing several "business objects" (data or functions) managed by the systems. Providing access, as described in CLAIM 1, gives the user access to these business objects via the collected BAPI call. So, the consolidated BAPI call is used to retrieve the data the user needs to access.

Claim 9

Original Legal Text

9. A centralized provisioning system that reduces a quantity of business application programming interface calls in a hardware client-server environment, wherein the client and the server each contain a processor and a memory, the centralized provisioning system comprising: a hardware server that implements the centralized provisioning system; a configuration module, implemented by the hardware server, that configures the centralized provisioning system with a plurality of access definitions for a plurality of systems, wherein the plurality of systems includes a parent system and a plurality of child systems; and a processing module, implemented by the hardware server, that receives a provisioning request for a user of a client system to access at least two of the plurality of child systems, that determines a collected business application programming interface call from the client system, according to the plurality of access definitions, that determines whether a system of the at least two of the plurality of child systems in the provisioning request participates in central user administration, if the system participates in central user administration, the collected business application programming interface call collects at least two business application programming interface calls to the at least two of the plurality of child systems into a single business application programming interface call to the parent system, and the centralized provisioning system provides access to the user to the at least two of the plurality of child systems according to the collected business application programming interface call to the parent system, and if the system does not participate in central user administration, the centralized provisioning system performs non-central user administration provisioning for the system by making a business application programming interface real time agent call that provides access to the user.

Plain English Translation

A centralized provisioning system reduces the number of BAPI calls in a client-server environment. It includes a server that implements the system. A configuration module sets up the system with access definitions for multiple systems (parent and child). A processing module receives a user's access request to at least two child systems, and determines a "collected" BAPI call based on access definitions. If a child system utilizes central user administration, the module condenses multiple BAPI calls to different systems into a single call to the parent system, granting access through that parent. If a child system does not use central user administration, it uses a real-time BAPI agent call to provide access.

Claim 10

Original Legal Text

10. The system of claim 9 , wherein determining the collected business application programming interface call comprises: generating a map of the plurality of systems that includes the parent system and the plurality of child systems; and determining the collected business application programming interface call according to the map.

Plain English Translation

When determining the collected BAPI call used in the centralized provisioning system (CLAIM 9), the system generates a map of the relationships between the parent and child systems. The collected BAPI call is then determined according to this system map. This map helps in determining the most efficient BAPI call path for each request.

Claim 11

Original Legal Text

11. The system of claim 9 , wherein determining the collected business application programming interface call comprises: determining whether a system level configuration is defined; determining whether a global level configuration is defined; and determining the collected business application programming interface call according to the system level configuration and the global level configuration.

Plain English Translation

When determining the collected BAPI call used in the centralized provisioning system (CLAIM 9), the system determines if there's a system-level configuration defined and also if a global-level configuration is defined. The system then determines the collected BAPI call according to these configurations, allowing for configuration at both specific and general levels.

Claim 12

Original Legal Text

12. The system of claim 9 , wherein the configuration module configures the centralized provisioning system with a plurality of access settings for the plurality of systems, and wherein the processing module determines a plurality of provisioning parameters for the plurality of systems according to the plurality of access settings, and provides access to the user according to the plurality of provisioning parameters.

Plain English Translation

The configuration module within the centralized provisioning system (CLAIM 9) configures the system with access settings for the systems. The processing module then determines provisioning parameters according to these access settings and grants the user access based on the provisioning parameters. Thus, the system uses access settings to determine appropriate access provisioning.

Claim 13

Original Legal Text

13. The system of claim 9 , wherein the provisioning request corresponds to a plurality of business application programming interface calls, and wherein the collected business application programming interface call results in a reduced quantity of business application programming interface calls as compared to the plurality of business application programming interface calls.

Plain English Translation

The user's provisioning request triggers multiple BAPI calls, but the collected BAPI call in the centralized provisioning system (CLAIM 9) reduces the quantity of BAPI calls required. This reduction in BAPI calls is a key function of the centralized provisioning system.

Claim 14

Original Legal Text

14. The system of claim 9 , wherein the provisioning request corresponds to a request to access a plurality of business objects managed by the plurality of systems, and wherein providing access comprises: providing access, to the user, to the plurality of business objects according to the collected business application programming interface call.

Plain English Translation

The user's access request in the centralized provisioning system (CLAIM 9) involves accessing business objects managed by the systems. Providing access means the user gains access to those business objects according to the collected BAPI call. The system reduces the overall number of BAPI calls while still providing the needed object access.

Claim 15

Original Legal Text

15. A non-transitory computer program product, comprising a computer readable medium having a computer readable program code embodied therein, that when executed by a hardware server, reduces a quantity of business application programming interface calls in a hardware client-server environment, wherein the client and the server each contain a processor and a memory, the non-transitory computer program product comprising: a configuration module that controls the hardware server to implement a centralized provisioning system with a plurality of access definitions for a plurality of systems, wherein the plurality of systems includes a parent system and a plurality of child systems; and a processing module that controls the hardware server to receive a provisioning request for a user of a client system to access at least two of the plurality of child systems, to determine a collected business application programming interface call from the client system, according to the plurality of access definitions, and to determine whether a system of the at least two of the plurality of child systems in the provisioning request participates in central user administration, if the system participates in central user administration, the collected business application programming interface call collects at least two business application programming interface calls to the at least two of the plurality of child systems into a single business application programming interface call to the parent system, and the centralized provisioning system provides access to the user to the at least two of the plurality of child systems according to the collected business application programming interface call to the parent system, and if the system does not participate in central user administration, the centralized provisioning system performs non-central user administration provisioning for the system by making a business application programming interface real time agent call that provides access to the user.

Plain English Translation

A non-transitory computer program product stored on a computer-readable medium reduces the number of BAPI calls in a client-server environment. A configuration module controls a server to set up a centralized provisioning system with access definitions for multiple systems (parent and child). A processing module controls the server to receive a user's request to access at least two child systems and determines a "collected" BAPI call based on access definitions. If a child system utilizes central user administration, the module condenses multiple BAPI calls into one for the parent, providing access that way. Otherwise, it initiates a real-time BAPI agent call for direct access.

Claim 16

Original Legal Text

16. The non-transitory computer program product of claim 15 , wherein determining the collected business application programming interface call comprises: generating a map of the plurality of systems that includes the parent system and the plurality of child systems; and determining the collected business application programming interface call according to the map.

Plain English Translation

The non-transitory computer program product (CLAIM 15) determines the collected BAPI call by generating a map of the system relationships (parent/child), and basing the collected BAPI call selection on this map. This allows the system to optimize the BAPI call generation process.

Claim 17

Original Legal Text

17. The non-transitory computer program product of claim 15 , wherein determining the collected business application programming interface call comprises: determining whether a system level configuration is defined; determining whether a global level configuration is defined; and determining the collected business application programming interface call according to the system level configuration and the global level configuration.

Plain English Translation

The non-transitory computer program product (CLAIM 15) determines the collected BAPI call by checking for system-level and global-level configurations, and then using these configurations to select the correct BAPI call. This allows for both specific and general BAPI call configurations.

Claim 18

Original Legal Text

18. The non-transitory computer program product of claim 15 , wherein the configuration module controls the hardware server to configure the centralized provisioning system with a plurality of access settings for the plurality of systems, and wherein the processing module controls the hardware server to determine a plurality of provisioning parameters for the plurality of systems according to the plurality of access settings, and to provide access to the user according to the plurality of provisioning parameters.

Plain English Translation

Within the non-transitory computer program product (CLAIM 15), the configuration module configures the centralized provisioning system with a variety of access settings for the systems. The processing module then determines provisioning parameters based on these access settings and grants access to the user based on these parameters. Access is thus defined via configuration and applied dynamically.

Claim 19

Original Legal Text

19. The non-transitory computer program product of claim 15 , wherein the provisioning request corresponds to a plurality of business application programming interface calls, and wherein the collected business application programming interface call results in a reduced quantity of business application programming interface calls as compared to the plurality of business application programming interface calls.

Plain English Translation

When using the non-transitory computer program product (CLAIM 15), the user's access request triggers multiple BAPI calls, but the collected BAPI call results in a reduced quantity of BAPI calls, improving overall performance. The product is designed to reduce the number of necessary BAPI calls.

Claim 20

Original Legal Text

20. The non-transitory computer program product of claim 15 , wherein the provisioning request corresponds to a request to access a plurality of business objects managed by the plurality of systems, and wherein providing access comprises: providing access, to the user, to the plurality of business objects according to the collected business application programming interface call.

Plain English Translation

The non-transitory computer program product (CLAIM 15) provides access to business objects when a user requests to access a plurality of systems, by providing access to the user through a collected BAPI call. The product manages to provide access to the business objects by reducing the number of BAPI calls.

Claim 21

Original Legal Text

21. The system of claim 9 , wherein the plurality of access settings includes a global level setting and a plurality of system level settings.

Plain English Translation

The access settings used in the centralized provisioning system (as described in CLAIM 9) include a global-level setting and system-level settings. This configuration allows for the definition of general access policies as well as specific system access policies.

Claim 22

Original Legal Text

22. The system of claim 9 , wherein the plurality of provisioning parameters includes at least one of a direct provisioning parameter and an indirect provisioning parameter.

Plain English Translation

The provisioning parameters used in the centralized provisioning system (as described in CLAIM 9) include direct and indirect provisioning parameters. Direct provisioning involves directly assigning permissions, while indirect provisioning can leverage group memberships, providing access in a flexible manner.

Claim 23

Original Legal Text

23. The non-transitory computer program product of claim 15 , wherein the plurality of access settings includes a global level setting and a plurality of system level settings.

Plain English Translation

The access settings within the non-transitory computer program product (as described in CLAIM 15) include both a global-level setting and system-level settings. This approach permits access management at both a broad, organization-wide level and at the level of individual systems.

Claim 24

Original Legal Text

24. The non-transitory computer program product of claim 15 , wherein the plurality of provisioning parameters includes at least one of a direct provisioning parameter and an indirect provisioning parameter.

Plain English Translation

The provisioning parameters within the non-transitory computer program product (as described in CLAIM 15) can be either direct or indirect. Direct parameters configure access specifically, while indirect parameters use mechanisms such as group membership or roles to manage access, providing a wide array of options to control access.

Classification Codes (CPC)

Cooperative Patent Classification codes for this invention. Click any code to explore related patents in that topic.

Patent Metadata

Filing Date

June 16, 2014

Publication Date

July 11, 2017

Want to explore more patents?

Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.

Citation & reuse

Analysis on this page is generated by Patentable — an AI-powered patent intelligence platform. AI-generated summaries, explanations, FAQs, and analysis may be reused with attribution and a visible link back to the canonical URL below. Patent abstracts and claims are USPTO public domain.

Cite as: Patentable. “System and method of consolidated central user administrative provisioning” (US-9704134). https://patentable.app/patents/US-9704134

© 2026 Nomic Interactive Technology LLC. Machine-readable context available at /api/llm-context/US-9704134. See llms.txt for full attribution policy.